53 matches found
CVE-2024-25513
The RuvarOA office automation system, specifically versions v6.01 and v12.01 , contains a SQL injection vulnerability. The root cause is a lack of validation for the file_id parameter at the /CorporateCulture/kaizen_download.aspx endpoint against external SQL input. An attacker can exploit this t...
CVE-2024-25513: Improper Neutralization of Special Elements used in an SQL Command
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the fileid parameter at /CorporateCulture/kaizendownload.aspx...
CVE-2024-25513
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the fileid parameter at /CorporateCulture/kaizendownload.aspx...
CVE-2024-25513
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the fileid parameter at /CorporateCulture/kaizendownload.aspx...
CVE-2023-33956: Exposure of Sensitive Information to an Unauthorized Actor
Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to an Insecure direct object reference IDOR vulnerability present in the application's URL parameter. This vulnerability enables any user to read files uploaded by any...
CVE-2019-13647: Improper Neutralization of Input During Web Page Generation
Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file content. The JavaScript code is executed during attachments/view/$fileid$ attachment viewing. NOTE: It is asserted that an attacker must have the same access rights as the user in...
CVE-2019-13645: Improper Neutralization of Input During Web Page Generation
Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file names. The JavaScript code is executed during attachments/edit/$fileid$ attachment editing. NOTE: It is asserted that an attacker must have the same access rights as the user in...
Concrete CMS: Stored XSS in adding fileset
Hello I found XSS and CSRF in Concrete5 5.7.3 Adding fileset function have CSRF vuln so I think easy to attack. PoC is below 1.Upload one file in file manager /conc/index.php/dashboard/files 2.Open the page like this ---------------------...
CVE-2014-3837
The document application in ownCloud Server before 6.0.3 uses sequential values for the fileid, which allows remote authenticated users to enumerate shared files via unspecified vectors...
CVE-2014-3837
The document application in ownCloud Server before 6.0.3 uses sequential values for the fileid, which allows remote authenticated users to enumerate shared files via unspecified vectors...
Server: Enumeration of shared files in documents
Due to using the auto-incrementing fileid instead of the random generated token to access files in the documents app an authenticated users could enumerate shared files of other users. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...
U-Mail任意文件上传漏洞一枚
简要描述： U-Mail存一处任意文件上传漏洞。 详细说明： 先登录官方测试站点： 这里登录的账号为：mailtest3721 再获取当前登录用户的userid http://mail.comingchina.com/webmail/client/oab/index.php?module=operate&action=member-get&page=1&orderby=&isreverse=1&keyword=mailtest3721 这里mailtest3721对应的userid为:78609 html exp: 上传文件： 上传后获取"fileid":"13995534500" im...